After a five-month hiatus since the previous 4.20 iteration, Samba, the well-known open-source software package that facilitates file sharing and printing services across a range of operating systems, including Windows and Unix, has officially rolled out its newest iteration, Samba 4.21.
The standout feature of this release is the bolstered security configurations for “appropriate users,” “unacceptable users,” “read list,” and “write list.” Before this update, unresolved user or group names were quietly skipped, potentially leaving access permissions vulnerable.
In this latest version, any name resolution issues stemming from communication errors with a domain controller will now trigger an error log. Eventually, access attempts will be denied, effectively thwarting unintended access.
Samba 4.21 also brings in support for LDAP TLS/SASL channel binding, a crucial security aspect aligning with contemporary cybersecurity standards. This upgrade facilitates secure SASL binds over TLS connections, significantly enhancing the authentication process.
New features and enhancements are also incorporated in this release, such as automatic keytab updates post machine password changes, which enhances the smooth functioning of network services reliant on Samba for authentication.
Another addition is a fresh DNS hostname configuration option, aimed at refining Samba’s integration within Active Directory ecosystems, thereby streamlining domain joins and service registrations.
For those overseeing complex setups, the latest version introduces support for Group Managed Service Accounts (gMSA), offering a more secure and manageable approach to handling service accounts across various servers, particularly beneficial for large-scale deployments.
Furthermore, Samba 4.21 sets the foundation for forthcoming enhancements, including planned deprecations and modifications. As an example, the new vfs-to-cephfs bridge module is on track to supplant the older CephFS implementations, ensuring improved performance and more robust security choices.
Individuals keen on delving deeper into all the transformations ushered in by Samba 4.21 can refer to the release notes.
